Privacy — acceptance version
Editorial acceptance document — Founder approval required before launch.
INCOMPLETE · 1.9.4 / 2026-10-05
Existing processing
Accounts retain login identity, email, preferences and favorites. Contributions go to editors. Editorial tools retain versions, decisions and audit records. Emails are not currently delivered. Private evidence is permission-protected.
Cookies and logs
Session and CSRF cookies support operation and security. This mission adds no analytics or third-party social feed. Abuse controls use hashed identity/network keys; access logs may contain IP addresses. Sessions last at most eight hours and expire on browser close; this is not account-data retention.
Items to finalize
Controller identity, legal bases, retention for accounts/contributions/audit/logs, processors, transfers and rights-request channel: TO APPROVE. Existing export and deactivation must be distinguished from full erasure; audit records require an approved retention policy.